dotenv-secretsmanager 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aff4454079cc1d1cbb65a127d128f185343e0f68527fea618e2939282db02a60
-  data.tar.gz: 570fb3b58c722c78f5d38ba24657cf299463256e78bd4fffd9832b34e760c330
+  metadata.gz: 62ef3b65d117f00e7c365872b6beb81e8da2bf425169881f4a298fcc388ce644
+  data.tar.gz: f3b4a305fbd391229c9a7ec50cff7478cb61fb3351cd94c28e05b2f2208f2999
 SHA512:
-  metadata.gz: f59d0999d3ce01cf9d4cc3a0afcda6eacf66b4ee89ee60d0108b2cf895c1deb9ddc99ea0c45b5b08dc02627edf292b97f788326603f40884a5bcd29efd5114e2
-  data.tar.gz: af7e008123e0b98461a01091d49d69deb4c9d994eba3f34c0b6e30e55959b1a6b9bfd0e1a00d5b453a399b804a88965fae5e83892d01e6b007cda74604bf60ca
+  metadata.gz: 6959abb2346741590c566de52e2242b108686e8d33dbee5c1f4995bdcbd55736478cf064f4b647ca315db4d5460b40290d3ebec0e9a94158619148b92469dbf2
+  data.tar.gz: a1762b6689843fba05b3f89effbe0e10b9e53cdfcef62105d8cdb46b90423a55378e9ccacccca0b5b2d37116304223c6d14d7782b3b4eb445a05433480cae2c5

data/README.md

@@ -61,6 +61,35 @@ end
 Credentials and region come from the standard AWS SDK credential chain. The gem
 makes zero AWS calls and builds no client when no references are present.
 
+## Skipping resolution
+
+Set the `DOTENV_SECRETSMANAGER_SKIP` env var (or `configuration.skip`) to make
+`resolve!` a pure no-op: no AWS calls, no client constructed, and `aws-sm:`
+references left untouched in `ENV`.
+
+```sh
+DOTENV_SECRETSMANAGER_SKIP=true
+```
+
+```ruby
+Dotenv::SecretsManager.configure { |c| c.skip = true }
+```
+
+- The env var is truthy when it is `1`, `true`, `yes`, or `on`
+  (case-insensitive; surrounding whitespace is ignored). Anything else —
+  `""`, `0`, `false`, `no`, or unset — does not by itself skip.
+- Either source skips: a truthy env var **or** `configuration.skip == true`.
+  The config flag skips regardless of the env var.
+- The env var is read at call time (when the railtie fires), so it is the right
+  knob for build-time use.
+
+The primary use case is an image build that boots the app — for example a Rails
+`assets:precompile` step in a Docker build — where there is no AWS region or
+credentials and no secrets are needed. Without skipping, constructing the AWS
+client raises (e.g. `Aws::Errors::MissingRegionError`) and fails the build. Set
+`DOTENV_SECRETSMANAGER_SKIP=true` on that step only. Non-secret `.env`
+config still loads normally; only secrets resolution is skipped.
+
 ## Deployment (AWS Lightsail Container Service)
 
 Set only `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, and `AWS_REGION` as

data/lib/dotenv/secretsmanager/configuration.rb

@@ -9,11 +9,14 @@ module Dotenv
       attr_accessor :logger
       # nil => a default Aws::SecretsManager::Client (built lazily, only if needed)
       attr_accessor :client
+      # true => skip resolution entirely (no AWS calls, no client, ENV untouched)
+      attr_accessor :skip
 
       def initialize
         @on_error = :raise
         @logger = nil
         @client = nil
+        @skip = false
       end
     end
   end

data/lib/dotenv/secretsmanager/version.rb

@@ -2,6 +2,6 @@
 
 module Dotenv
   module SecretsManager
-    VERSION = "0.1.0"
+    VERSION = "0.2.0"
   end
 end

data/lib/dotenv/secretsmanager.rb

@@ -9,6 +9,8 @@ require "dotenv/secretsmanager/resolver"
 
 module Dotenv
   module SecretsManager
+    SKIP_ENV_VAR = "DOTENV_SECRETSMANAGER_SKIP"
+
     class << self
       def configuration
         @configuration ||= Configuration.new
@@ -24,8 +26,25 @@ module Dotenv
       end
 
       def resolve!(env = ENV)
+        return env if skip?
+
         Resolver.new(env: env, config: configuration).resolve!
       end
+
+      # Skip resolution entirely. Either the env var or the config flag can
+      # request it; resolution happens only when neither does. Read at call
+      # time so a railtie firing during an image build honors the env var.
+      def skip?
+        truthy?(ENV[SKIP_ENV_VAR]) || configuration.skip
+      end
+
+      private
+
+      def truthy?(value)
+        return false if value.nil?
+
+        %w[1 true yes on].include?(value.strip.downcase)
+      end
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dotenv-secretsmanager
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - key88sf